Unauthorized access by a third party was confirmed at 2nd RETAILING Co.,Ltd., a GEO HOLDINGS group company that operates 2nd STREET and GEO. Their apps and web services have been suspended. No restart date has been set, and store operations have not been affected.
2nd RETAILING Co.,Ltd. announced that it had confirmed unauthorized access by a third party on 15 October and, after taking countermeasures, would suspend the 2nd STREET and GEO apps and web services from 21:00 on 17 October to prevent further damage and conduct system maintenance. The services affected include both brands' apps, online stores and home pickup purchasing, GEO Mobile's UQ mobile online store, purchase lockers, combined purchases and 2nd STORAGE. Store hours have not changed, and the company is investigating the cause and scope of the impact with an external security organisation. It said it would provide an update on the restart date once a timetable had been established. The announcement summarised in this article sets out the key points of the official notice and states that whether information was leaked remains undetermined. These facts indicate that the suspension is a measure intended to prevent further damage.
The 2nd STREET and GEO online stores and home pickup purchasing services remain suspended, but in-store purchases and sales are available as usual. Customers have been advised to present a Ponta card, including its digital version, as their membership card. New online orders and some services remain unavailable, and the 2nd STREET My Page cannot be accessed. For home pickup purchases, collection will take place as scheduled, but procedures such as checking appraisal results and receiving payment remain unavailable. Further information on the restart date and scope of the impact is expected to be provided in future announcements.
JVN has disclosed 2 vulnerabilities in the Android and iOS versions of GEO's GEO App, with version 11.8.8 expected to be the patched release. The company's published materials do not indicate a direct causal relationship with the current unauthorized access to its internal systems. Future official announcements will be watched for details on the restart date and on the handling of appraisals and payments.